$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa File: 81157f40-1330-3f4f-8709-0472d5c62aa1.roa (raw, json) Hash identifier: THuDFHRURYtzQUeVRrJZuUcxyyhwLyOCPSmBcvqY32w= Subject key identifier: 61:E3:90:10:A6:AC:A3:2D:B8:81:42:BC:1E:70:24:75:65:AC:27:99 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584AADF11D854D476CEFE3FEBE40 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 18593 IP address blocks: 138.8.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1d:85:4d:47:6c:ef:e3:fe:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=973d182d-fae7-478b-b6ce-89a6820d21e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:ab:e2:17:5d:93:3e:bf:20:23:12:8f:7f: d2:f3:53:8c:4f:75:8a:4c:d3:8e:a9:e5:bb:79:d6: b1:53:c7:22:38:80:43:e6:ef:0d:a0:d4:ae:9c:53: 6a:52:f8:8f:22:4d:e3:5f:35:cb:89:04:77:17:fc: c1:f6:f0:28:d4:66:f8:23:63:41:2d:62:ff:d8:20: d2:4f:76:94:c9:06:02:44:ff:26:83:e5:81:39:1d: 18:27:11:02:23:43:1c:59:f5:a2:44:66:2d:54:c8: 30:15:3e:fd:32:74:91:85:e0:2f:32:78:71:f1:47: 53:34:01:ad:93:5a:21:d1:6e:10:6e:a7:85:8e:4c: 2b:49:fe:a1:03:5e:83:fa:66:31:95:d0:d0:51:ca: 76:01:10:f5:2e:16:d3:2b:6d:0d:b3:84:01:31:2f: c9:fc:78:5b:00:fa:ba:bd:3c:ea:05:2f:1a:1b:b2: 9e:a1:43:38:e3:f9:bb:e8:fc:bc:64:b5:4f:42:a5: a8:50:8a:5d:f8:01:44:76:64:c8:a9:b7:f5:50:0b: 29:46:98:9e:67:c1:f3:73:16:2e:f1:4d:f5:6c:6f: 7d:08:d3:5d:c6:8e:21:d9:8b:69:b2:2f:eb:95:23: 30:bb:7c:f8:35:4b:7a:5c:92:3d:22:4d:d7:23:47: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E3:90:10:A6:AC:A3:2D:B8:81:42:BC:1E:70:24:75:65:AC:27:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1d:96:80:4f:35:ce:31:d9:a6:7c:44:02:2b:31:ac:c8:80: 68:ea:f0:9a:75:a0:f3:f3:c2:26:73:83:7e:de:43:42:5e:48: 37:37:a3:8c:c5:f1:da:22:0b:48:2e:49:82:7f:ab:dd:00:a0: bb:2a:31:84:6e:9b:84:68:c5:4f:3b:3c:bd:63:e5:d0:33:8a: a6:31:07:5e:16:2f:23:c3:d6:5f:91:d3:60:75:db:a9:32:c2: fb:d9:0f:57:11:c3:58:d2:dd:50:23:8f:ad:75:d4:18:b5:1c: 9b:12:11:39:b7:da:dc:a0:e8:fb:3c:36:1f:f4:15:09:ed:81: d7:25:b7:92:06:19:9d:11:97:66:b8:6a:fd:b8:5b:2f:8e:93: 5d:07:3a:1b:d6:bc:08:24:54:d6:4f:c1:8f:ae:25:c9:76:8d: 2e:61:9e:d9:76:6f:29:36:92:53:fc:c1:41:28:15:ef:83:59: 82:2e:bb:f4:70:7c:ad:1d:ae:33:b7:da:c3:4e:57:e8:ec:f1: 61:a8:80:ea:10:95:40:e8:ad:66:59:ed:fd:6d:5a:13:57:6f: 40:5e:b0:e9:14:6b:f8:b0:b8:a6:d4:75:79:43:4f:d8:51:80: c4:69:0b:b7:07:8c:6c:ed:cd:e2:60:d4:52:d4:85:0c:3b:a0: dc:c9:4c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8R2FTUds7+P+vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk OTczZDE4MmQtZmFlNy00NzhiLWI2Y2UtODlhNjgyMGQyMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQOr4hddkz6/ICMSj3/S81OMT3WKTNOOqeW7 edaxU8ciOIBD5u8NoNSunFNqUviPIk3jXzXLiQR3F/zB9vAo1Gb4I2NBLWL/2CDS T3aUyQYCRP8mg+WBOR0YJxECI0McWfWiRGYtVMgwFT79MnSRheAvMnhx8UdTNAGt k1oh0W4QbqeFjkwrSf6hA16D+mYxldDQUcp2ARD1LhbTK20Ns4QBMS/J/HhbAPq6 vTzqBS8aG7KeoUM44/m76Py8ZLVPQqWoUIpd+AFEdmTIqbf1UAspRpieZ8HzcxYu 8U31bG99CNNdxo4h2Ytpsi/rlSMwu3z4NUt6XJI9Ik3XI0daUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHjkBCmrKMtuIFCvB5wJHVlrCeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvODExNTdmNDAtMTMzMC0z ZjRmLTg3MDktMDQ3MmQ1YzYyYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgdloBPNc4x2aZ8RAIrMazIgGjq8Jp1oPPzwiZzg37eQ0JeSDc3o4zF 8doiC0guSYJ/q90AoLsqMYRum4RoxU87PL1j5dAziqYxB14WLyPD1l+R02B126ky wvvZD1cRw1jS3VAjj6111Bi1HJsSETm32tyg6Ps8Nh/0FQntgdclt5IGGZ0Rl2a4 av24Wy+Ok10HOhvWvAgkVNZPwY+uJcl2jS5hntl2byk2klP8wUEoFe+DWYIuu/Rw fK0drjO32sNOV+js8WGogOoQlUDorWZZ7f1tWhNXb0BesOkUa/iwuKbUdXlDT9hR gMRpC7cHjGztzeJg1FLUhQw7oNzJTEM= -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:25 2025 by rpki-client